CYPRESS: Report D3.2 - Enhancing Cyber-Physical Security in Real-Time Operation

The CYPRESS project focuses on addressing the Cyber-Physical Risk associated with the bulk Electric Energy Supply (EES) system, which is becoming increasingly complex due to the growing integration of information and communication technologies. This transformation brings significant benefits but also introduces novel vul- nerabilities, particularly in terms of cyber-threats. The overarching aim of CYPRESS is to develop the knowl- edge, methods, and tools necessary to ensure the security of electric energy supply systems, accounting for these cyber-physical risks and integrating them into a coherent probabilistic risk management framework. To achieve this, the project is structured around three main research themes: i) the development of novel models and benchmarks for the simulation and testing of cyber-physical systems, ii) the assessment of these systems’ vulnerabilities, and iii) the enhancement of their resilience to threats.

Work Package 3 (WP3), titled ”Mitigation of cyber-physical security risks,” is a key part of this effort. WP3’s main objective is to develop strategies and decision-making tools to help reduce the risks associated with cyber- physical vulnerabilities in power systems. Within WP3, Task 3.2 (T3.2) specifically targets the development of real-time operation strategies that incorporate cyber-threats into power system operations, providing tools and techniques for the immediate detection, assessment, and mitigation of such threats.

The T3.2 sub-task investigates decision-making aids for real-time operations, extending traditional power sys- tem operational frameworks to include cyber-physical considerations. This includes strategies for system ob- servability, monitoring cyber-physical interactions, and ensuring resilient recovery from attacks. Methods de- veloped in T3.2 are built on previous work in preventive and corrective risk management and are designed to be implemented in the transmission system operator (TSO) and distribution system operator (DSO) environ- ments. These methods will allow for the continuous monitoring and response to cyber-physical risks as they arise, optimizing both preventive measures and corrective actions in line with Objectives 1-3, while Objective 4 focuses on ensuring the resilience of cyber-physical infrastructures even when partially compromised, through novel design, algorithms, and protocols.